REMARKS 

Reconsideration of the present application is respectfully requested. After entry of this 
amendment, claims 1-14, 27-31 and 39 are canceled, and claims 15-26, 32-28 and 40-55 
remain pending. 

Claims 1-6 and 39 stand rejected under 35 U.S.C. § 102(e) based on U.S. Patent 
application publication no. 2002/0194584 of Suorsa et al. ("Suorsa"). Claims 7, 15, 17, 19, 27- 
29, 31 , 40-41 , 43-45, 47-49 and 51-53 stand rejected under 35 U.S.C. § 103(a) based on 
Suorsa. 

Applicants respectfully traverse the rejections. Applicants reserve the right to swear 
behind Sousa in a future reply, if Applicants deem it necessary or appropriate to do so. 

In the Final Office Action, the Examiner failed to respond to several of Applicants' 
arguments. For example, the Examiner did not respond to Applicants' arguments regarding 
independent claims 15, 40 and 44 (see p. 18 of Applicants' response filed on 1/10/2006). 
Regarding those claims: 

Claim 1 5 recites that the secondary TPD is authorized to provision the mobile device via 
a network . Claims 40 and 44 recite similar limitations (note "remote source" in last element of 
claim 44). An agent 36 in Suorsa cannot be interpreted as the "secondary TPD" in these claims, 
because an agent 36 in Suorsa is implemented within the device to be provisioned; it does not 
communicate with the device to be provisioned via a network . Furthermore, there is no 
indication or suggestion in Suorsa as to why such a configuration/functionality would even be 
desirable. For at least this reason, therefore, claims 15, 40, and 44, and all claims which 
depend on them are patentable over Suorsa. 
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Regarding claims 20 and 32, claim 20 recites: 

20. A method comprising: 

operating a primary provisioning server within a predefined trusted 
environment, the primary provisioning server having authorization to provision a 
plurality of mobile devices on a wireless network; 

using the primary provisioning server to provision a digital 
certificate of the primary provisioning server in each of the mobile 
devices; 

using the primary provisioning server to provision a digital 
certificate of a secondary provisioning server in the mobile devices, 
wherein the secondary provisioning server is on a second network 
outside the trusted environment; and 

using the primary provisioning server to provision the mobile devices with 
information indicating to the mobile devices authorization of the secondary 
provisioning server to provision the mobile devices. 
(Emphasis added.) 

The Examiner admitted that Suorsa fails to disclose using the primary provisioning 
server to provision a digital certificate of the primary provisioning server in each of the mobile 
devices, or using the primary provisioning server to provision a digital certificate of a secondary 
provisioning server in the mobile devices, wherein the secondary provisioning server is on a 
second network outside the trusted environment (Final Office Action, p. 25). However, the 
Examiner cites Ramasubramani as providing the claim limitations not found in Suorsa. 

On page 2 of the Final Office Action the Examiner responds to Applicants' previous 
arguments. The Examiner states: 

Suorsa does not teach "provisioning digital certificates". Ramasubramani 
teaches using "digital certificates" (column 4 lines 29-30) in devices. 
Ramasubramani was used to teach the use of digital certificates and not the 
provisioning of devices. Suorsa teaches that "information stored in this database 
comprises all data that is necessary to provision a device" (paragraph 47) and 
that this information can include software components that are installed on each 
device, and logical information about the device (paragraph 47). This information 
can include any type of logical information including a digital certificate, which 
would be used to provide "the most secure use of authentication" 
(Ramasubramani: column 4, lines 29-31). Therefore, it is asserted that the CPA 
does teach the above limitation. 



The Examiner seems to have missed Applicants' points. First, no combination of Suorsa 
and Ramasubramani teaches or suggests all of the limitations of claim 20 or claim 32. The fact 
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is that neither Suorsa nor Ramasubramani, nor any combination thereof, discloses or suggests 
provisioning, in a mobile device, a digital certificate of a provisioning server , much less 
provisioning a digital certificate of a secondary provisioning server in the mobile device, nor do 
they suggest why it would be desirable to do so. Note that claim 32 includes similar limitations. 
Even if one accepts arguendo all of the Examiner's characterization of the cited references as 
true, this claim limitation is not taught or suggested by the resulting combination. 

Furthermore, as previously stated, Ramasubramani clearly teaches away from the 
invention of claims 20 and 32, by teaching that digital certificates should be stored in a 
centralized proxy server , rather than in the device to be provisioned per claim 20 (col. 7, line 66 
to col. 8, line 2). In view of this teaching away, Ramasubramani cannot be relied upon in any 
combination to render the present invention obvious. 

The Examiner must also keep in mind that, under 35 U.S.C. § 103, the invention as a 
whole must be obvious in order to sustain an obviousness rejection. It is incorrect to argue that 
the separate elements or steps of a claim taken by themselves are known or obvious and that 
"therefore" the whole subject-matter claimed is obvious. Further, "it is impermissible to use the 
claimed invention as an instruction manual or 'template' to piece together the teachings of the 
prior art so that the claimed invention is rendered obvious." In re Fritch , 972 F.2d 1260, 1266 
(1992). 

In light of the fact that the cited combination does not teach all of the claim limitations, 
and Ramasubramani's teaching away, no combination of Suorsa and Ramasubramani renders 
the invention of claim 20 or claim 32 obvious as a whole. Therefore, claims 20 and 32 and all 
claims which depend on them are patentable over the cited art. 
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Further regarding independent claims 44 and 52, the cited art does not disclose or 
suggest the ability of a device to be provisioned (such as a mobile device) to distinguish 
between a message from a primary TPD as a remote source and a message from a secondary 
TPD as a remote source, as essentially recited in those claims. The Examiner failed to respond 
to this argument in the Final Office Action. 

In Suorsa, the device to be provisioned relies upon its internal agent 36 to handle all 
provisioning tasks on the device. Since the agent 36 is within the device to be provisioned, it is 
not a remote source and therefore it cannot be interpreted as the primary TPD or the secondary 
TPD recited in claims 44 and 52. Furthermore, Applicants find no indication that the agent 36 or 
any other functionality in the device to be provisioned can distinguish provisioning messages 
from two different remote sources . Therefore, these claims and all claims which depend on 
them are patentable over the cited art for these additional reasons. 



Further regarding independent claims 40 and 48, claim 40 provides: 



40. (Previously presented) A method of operating a mobile device on a 
wireless network, the method comprising: 

receiving a provisioning message from a first trusted provisioning domain 
(TPD), the provisioning message specifying a second TPD and indicating 
a parameter which the second TPD is authorized to provision in the 
mobile device, the secondary TPD comprising a provisioning server; 

storing information identifying the second TPD and the parameter in 
response to the provisioning message; and 

provisioning the parameter in the mobile device in response to a 
provisioning message received over a network from the second TPD. 
(Emphasis added.) 

Claim 48 contains similar limitations. 

The cited art does not disclose or suggest any functionality, in a device to be provisioned 
(such as a mobile device), by which the device is initially provisioned by a first trusted 
provisioning domain (TPD), to enable it to be subsequently provisioned by a second TPD. More 
specifically regarding claims 40 and 48, the cited art fails to disclose or suggest storing 
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information identifying the second TPD and the parameter in response to the provisioning 
message . 

On page 3 of the Final Office Action the Examiner responds to Applicants' previous 

arguments. The Examiner states: 

The CPA discloses "the agent communicates with the provisioning 
network 31 to obtain commands regarding tasks that need to be performed on its 
device" (paragraph 47). The commands can be viewed as the provisioning 
message as they contain instructions on how to provision the device. Therefore, 
it is asserted that the CPA does teach the above limitation. 

Even if the Examiner's interpretation is accepted arguendo as true, Suorsa still does not 
disclose or suggest storing information identifying the second TPD in response to the 
provisioning message , nor does Suorsa even suggest why it would be desirable to do so. The 
Examiner has interpreted the agent 36 in Suorsa to be the "second TPD" in Applicants' claims. 
However, since the agent 36 is within the device to be provisioned, there is no apparent reason 
why it would store information identifying itself in response to a provisioning message. 
Likewise, Ramasubramani also fails to disclose or suggest such functionality. Therefore, claims 
40 and 48 are further patentable over the cited art, along with their dependent claims, for these 
additional reasons. 

Applicants, therefore, respectfully maintain their arguments from their previous 
response, filed on 1/10/2006. 

Dependent Claims 

In view of the above remarks, a specific discussion of the dependent claims is 
considered to be unnecessary. Therefore, Applicants' silence regarding any dependent claim is 
not to be interpreted as agreement with, or acquiescence to, the rejection of such claim or as 
waiving any argument regarding that claim. 
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Conclusion 

For the foregoing reasons, the present application is believed to be in condition for 
allowance, and such action is earnestly requested. 

If any additional fee is required, please charge Deposit Account No. 02-2666. 



Dated: June 2, 2006 
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Jordan M/&ecker 
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